Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bc80228be7eda87a0edd91e17e3b48e432be5fdd.roa
File:                     bc80228be7eda87a0edd91e17e3b48e432be5fdd.roa (raw, json)
Hash identifier:          QXH6gBGOZSpo512c9lV90y/uu0ORXdPyngZdpZ7EV64=
Subject key identifier:   95:23:A3:DF:0A:AA:92:B6:CE:31:AA:69:3E:ED:16:9A:41:9B:F9:0F
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CA753
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bc80228be7eda87a0edd91e17e3b48e432be5fdd.roa
Signing time:             Wed 28 Sep 2022 16:33:33 +0000
ROA not before:           Wed 28 Sep 2022 16:31:51 +0000
ROA not after:            Sat 28 Sep 2024 16:31:51 +0000
asID:                     11830
IP address blocks:        190.241.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877843 (0x1ca753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:31:51 2022 GMT
            Not After : Sep 28 16:31:51 2024 GMT
        Subject: CN=bc80228be7eda87a0edd91e17e3b48e432be5fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9c:b9:e6:59:4e:4c:3a:8a:2e:08:92:92:39:
                    07:be:e5:31:42:c0:31:74:0c:b2:6f:c5:3c:29:50:
                    3c:4c:60:5e:9e:d2:e8:e5:e3:23:af:fd:40:93:9c:
                    25:13:59:b3:a2:47:32:3b:94:05:59:3d:8e:84:aa:
                    ed:e3:2e:08:9a:96:a9:27:95:6f:8e:04:66:cd:9f:
                    30:7a:00:d9:e1:b9:08:a6:bf:94:36:81:f1:fc:e6:
                    ca:02:9d:ea:87:5c:75:f7:d4:88:d6:47:8a:24:0c:
                    93:1e:0f:43:c1:d4:17:64:66:43:df:17:12:e0:f3:
                    b8:bf:58:19:17:66:5b:56:37:21:85:a6:60:df:f1:
                    ba:3c:2c:a3:57:d9:64:a0:60:ab:69:31:ce:1a:80:
                    ca:93:11:25:e8:08:59:58:9f:28:cb:fc:90:b4:08:
                    cd:f4:57:aa:65:47:07:e0:90:b3:ea:be:38:16:6a:
                    9f:d6:d2:00:5d:3e:ae:6e:10:51:aa:f6:69:ca:9c:
                    fc:15:27:4b:85:89:11:0e:9c:93:31:08:08:69:d3:
                    4c:03:98:05:c6:ae:e1:37:17:0e:0e:c9:cd:80:c2:
                    67:cf:69:dd:b9:46:c3:63:f1:a2:30:a7:1e:22:9a:
                    ed:03:7c:7d:9d:13:16:60:95:98:7b:0a:93:88:7d:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:23:A3:DF:0A:AA:92:B6:CE:31:AA:69:3E:ED:16:9A:41:9B:F9:0F
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bc80228be7eda87a0edd91e17e3b48e432be5fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:89:c1:91:93:49:db:ed:53:a8:61:23:51:a5:26:b3:a0:8d:
         5a:7a:1f:87:d7:c6:1d:d1:e0:ab:0b:63:a6:ca:1e:fa:fa:09:
         aa:30:9b:36:8b:d1:05:eb:09:0e:15:a9:ba:2d:1b:02:02:1e:
         11:c0:3a:d0:ed:7f:64:ff:12:ea:18:4d:36:e6:5d:c5:19:63:
         57:61:38:7b:2a:7b:ab:40:30:96:e3:e9:df:c3:d1:5f:03:75:
         88:cd:d8:fc:46:54:31:78:87:71:1a:84:e3:7b:11:12:16:ea:
         87:20:92:ba:74:09:62:36:b0:54:1d:2d:8a:8f:ec:f6:82:da:
         be:eb:be:ec:40:e2:29:75:db:2b:da:00:ff:78:a2:af:43:53:
         82:66:3a:97:f7:aa:2e:eb:39:81:b7:b5:2d:77:18:38:1b:35:
         27:1a:eb:7f:f2:5e:ab:a9:ce:8d:18:87:1e:38:81:72:41:5c:
         d0:35:2c:5b:60:db:cf:91:4a:ae:5f:01:51:fc:67:1c:22:4a:
         d8:32:8e:3e:dc:35:ea:a4:8d:8c:4a:7e:42:2c:23:62:bf:b5:
         74:71:bf:67:a7:20:9f:8b:90:02:df:56:e4:62:d1:f2:2c:4b:
         27:3a:d8:35:d0:ca:05:cf:70:5a:e3:fb:fe:50:a0:b3:8b:ba:
         a5:8e:28:c6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHKdTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI4
MTYzMTUxWhcNMjQwOTI4MTYzMTUxWjAzMTEwLwYDVQQDEyhiYzgwMjI4YmU3ZWRh
ODdhMGVkZDkxZTE3ZTNiNDhlNDMyYmU1ZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg5y55llOTDqKLgiSkjkHvuUxQsAxdAyyb8U8KVA8TGBentLo
5eMjr/1Ak5wlE1mzokcyO5QFWT2OhKrt4y4ImpapJ5VvjgRmzZ8wegDZ4bkIpr+U
NoHx/ObKAp3qh1x199SI1keKJAyTHg9DwdQXZGZD3xcS4PO4v1gZF2ZbVjchhaZg
3/G6PCyjV9lkoGCraTHOGoDKkxEl6AhZWJ8oy/yQtAjN9FeqZUcH4JCz6r44Fmqf
1tIAXT6ubhBRqvZpypz8FSdLhYkRDpyTMQgIadNMA5gFxq7hNxcODsnNgMJnz2nd
uUbDY/GiMKceIprtA3x9nRMWYJWYewqTiH3o+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJUjo98KqpK2zjGqaT7tFppBm/kPMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyL2JjODAyMjhiZTdlZGE4N2EwZWRkOTFlMTdlM2I0OGU0MzJiZTVmZGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7xdjANBgkqhkiG9w0BAQsFAAOCAQEAMInBkZNJ2+1TqGEj
UaUms6CNWnofh9fGHdHgqwtjpsoe+voJqjCbNovRBesJDhWpui0bAgIeEcA60O1/
ZP8S6hhNNuZdxRljV2E4eyp7q0AwluPp38PRXwN1iM3Y/EZUMXiHcRqE43sREhbq
hyCSunQJYjawVB0tio/s9oLavuu+7EDiKXXbK9oA/3iir0NTgmY6l/eqLus5gbe1
LXcYOBs1Jxrrf/Jeq6nOjRiHHjiBckFc0DUsW2Dbz5FKrl8BUfxnHCJK2DKOPtw1
6qSNjEp+QiwjYr+1dHG/Z6cgn4uQAt9W5GLR8ixLJzrYNdDKBc9wWuP7/lCgs4u6
pY4oxg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org